CVE-2023-25136
25Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 90%
probabilidad de explotación
90%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Lo que declaran los fabricantes (VEX)
Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.
Red Hatdocumento VEX ↗
Corregido
2 productos (114 componentes)
Red Hat Enterprise Linux AppStream (v. 9) · Red Hat Enterprise Linux BaseOS (v. 9)
No afectado
3 productos (26 componentes) — porque el código vulnerable no está presente en el producto
Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 6
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."
Productos afectados
n/a · n/aReferencias
https://bugzilla.mindrot.org/show_bug.cgi?id=3522https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sighttps://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/https://news.ycombinator.com/item?id=34711565https://security.gentoo.org/glsa/202307-01https://security.netapp.com/advisory/ntap-20230309-0003/https://www.openwall.com/lists/oss-security/2023/02/02/2http://www.openwall.com/lists/oss-security/2023/02/13/1http://www.openwall.com/lists/oss-security/2023/02/22/1